[jamieweb]

I use it to test my Content-Security-Policy by crawling my whole site and capturing any violation reports that are sent.

[doopy1]

Mind sharing your script?

[jamieweb]

This has been absorbed into an internal repo now, but the original version that I wrote a couple of years ago is here: https://gitlab.com/jamieweb/travis-ci_csp-tester/

[doopy1]

Cheers!

[peteypao]

What's wrong with just plain old curl?

[jamieweb]

cURL doesn't load subresources or honour Content-Security-Policy headers as this is beyond the scope of what it's supposed to do.